CVE-2019-14314

Name: CVE-2019-14314
Creator: NVD / NIST
Published: 2019-08-27T16:15:11.007+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 43.35%

Last modified Jun 17, 2026

CVE-2019-14314 is a vulnerability of currently unknown severity. A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via modules/nextgen_gallery_display/package.module.nextgen_gallery_display.php.. EPSS estimates a 43.35% chance of exploitation in the next 30 days.

Description

A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via modules/nextgen_gallery_display/package.module.nextgen_gallery_display.php.

Metrics

EPSS Probability

43.35%

98.6th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-89

Affected Software

Vendor	Product	Versions
Imagely	Nextgen Gallery	< 3.2.10

References

https://de.wordpress.org/plugins/nextgen-gallery/#developers
https://wordpress.org/plugins/nextgen-gallery/#developersRelease Notes
https://wpvulndb.com/vulnerabilities/9816Release Notes, Third Party Advisory
https://de.wordpress.org/plugins/nextgen-gallery/#developers
https://wordpress.org/plugins/nextgen-gallery/#developersRelease Notes
https://wpvulndb.com/vulnerabilities/9816Release Notes, Third Party Advisory

Timeline

Published: Aug 27, 2019
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2019-14314?

How severe is CVE-2019-14314?

Severity scoring for CVE-2019-14314 is pending analysis. The EPSS model estimates a 43.35% probability of exploitation in the next 30 days.

How do I fix CVE-2019-14314?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-14314?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST